glpi: fix SQL Injection CVE-2014-9258